View | Details | Raw Unified | Return to bug 194292 | Differences between
and this patch

Collapse All | Expand All

(-)etc/defaults/rc.conf (-1 / +5 lines)
Lines 144-151 Link Here
144 
				# firewall.
 144 
				# firewall.
145 
#firewall_simple_onet_ipv6="2001:db8:2:0::/56" # Outside IPv6 network prefix
 145 
#firewall_simple_onet_ipv6="2001:db8:2:0::/56" # Outside IPv6 network prefix
146 
				# for "simple" firewall.
 146 
				# for "simple" firewall.
147 
firewall_myservices=""		# List of TCP ports on which this host
 147 
firewall_myservices_tcp=""	# List of TCP ports on which this host
148 
				# offers services for "workstation" firewall.
 148 
				# offers services for "workstation" firewall.
149 
firewall_myservices=""		# Alias for myservices_tcp (deprecated)
150 
				# offers services for "workstation" firewall.
151 
ffirewall_myservices_udp=""	# List of UDP ports on which this host
152 
				# offers services for "workstation" firewall.
149 
firewall_allowservices=""	# List of IPs which have access to
 153 
firewall_allowservices=""	# List of IPs which have access to
150 
				# $firewall_myservices for "workstation"
 154 
				# $firewall_myservices for "workstation"
151 
				# firewall.
 155 
				# firewall.
(-)etc/rc.firewall (-1 / +11 lines)
Lines 422-429 Link Here
422 

          422
          

        

        

          423
          
[Ww][Oo][Rr][Kk][Ss][Tt][Aa][Tt][Ii][Oo][Nn])

          423
          
[Ww][Oo][Rr][Kk][Ss][Tt][Aa][Tt][Ii][Oo][Nn])

        

        

          424
          
	# Configuration:

          424
          
	# Configuration:

        

          
            

              425
              
	#  firewall_myservices:		List of TCP ports on which this host


              425
              
	#  firewall_myservices_tcp:	List of TCP ports on which this host

            

        

          426
          
	#			 	 offers services.

          426
          
	#			 	 offers services.

        

            

              
              
              427
              
	#  firewall_myservices:		Alias for firewall_myservices_tcp

            

            

              428
              
	#			 	 offers services.

            

            

              429
              
	#  firewall_myservices_udp:	List of UDP ports on which this host

            

            

              430
              
	#			 	 offers services.

            

        

          427
          
	#  firewall_allowservices:	List of IPv4 and/or IPv6 addresses

          431
          
	#  firewall_allowservices:	List of IPv4 and/or IPv6 addresses

        

        

          428
          
	#				 that have access to

          432
          
	#				 that have access to

        

        

          429
          
	#				 $firewall_myservices.

          433
          
	#				 $firewall_myservices.

        

  

    
      
            Lines 489-494
          
      
      
        Link Here
      
    
  

        

          489
          
	  for j in ${firewall_myservices} ; do

          493
          
	  for j in ${firewall_myservices} ; do

        

        

          490
          
	    ${fwcmd} add pass tcp from $i to me $j

          494
          
	    ${fwcmd} add pass tcp from $i to me $j

        

        

          491
          
	  done

          495
          
	  done

        

            

              
              
              496
              
	  for j in ${firewall_myservices_tcp} ; do

            

            

              497
              
	    ${fwcmd} add pass tcp from $i to me $j

            

            

              498
              
	  done

            

            

              499
              
	  for j in ${firewall_myservices_udp} ; do

            

            

              500
              
	    ${fwcmd} add pass udp from $i to me $j

            

            

              501
              
	  done

            

        

          492
          
	done

          502
          
	done

        

        

          493
          

          503
          

        

        

          494
          
	# Allow all connections from trusted IPs.

          504
          
	# Allow all connections from trusted IPs.

        






  

  Return to bug 194292